Command Line Log Analysis Meets the Age of Agents

Command Line Log Analysis Meets the Age of Agents
Zine collage: a brass doorknob labeled Dead as a Doorknob, crossed out, next to a crank press turning a pile of log printouts into one short card, with a Petit Is Back tape strip

Petit, my command line log analysis tool from 2009, is back. It shrank logs for sysadmins, and now it shrinks them for AI agents too.

Defending Your Agents Against Adversarial Trajectory Guidance (And Other Gnarly Things)

Defending Your Agents Against Adversarial Trajectory Guidance (And Other Gnarly Things)
Prompt injection defense with Trentina MCP gateway - blocked packet quarantine

If you’ve been following Trentina, you know I’ve been beating the drum on prompt injection defense for a while now. I built a three-layer quarantine system, wrote about prompt injection in terms of epidemiology, and generally been that guy at the party who won’t shut up about how your AI agent is going to get

The Prompt Injection That Copies Itself

The Prompt Injection That Copies Itself
Diagram of Trentina's layered prompt injection defense filtering untrusted content through three screens before it reaches an AI agent.

A prompt injection doesn’t have to act to be dangerous. It can hide, copy itself, and spread agent to agent. Why AI security is an epidemiology problem, and how to respond.

MCP-Airlock Is Now Trentina: The 1377 Quarantine That Inspired Our Rename

MCP-Airlock Is Now Trentina: The 1377 Quarantine That Inspired Our Rename
Trentina MCP security - medieval ship anchored near quarantine island off Ragusa, with torn tape labels reading Trentina, 1377, Quarantine, and MCP Security on aged parchment

MCP-Airlock is becoming Trentina — named after the 1377 quarantine system from Ragusa that inspired its architecture. Same three-layer defense, same gateway, better name.

Project Bluefin is Helping Prove That Dark Factories Work for Operating Systems

Project Bluefin is Helping Prove That Dark Factories Work for Operating Systems
90s zine collage showing a fire truck crossed out with a red X next to a building inspector clipboard with green checkmarks and the GNOME foot logo, representing the shift from reactive bug reporting to automated desktop testing

Six years ago, I wrote about the good, better, best approach to Linux quality when evaluating container images. The same framework applies to desktop Linux distributions – maybe even more so, because desktops have a GUI that’s notoriously hard to test automatically. Here’s what I wrote: Good: Use a bug tracker and collect problems as

Put The Tron Ares Album On and Build Something at Midnight

Put The Tron Ares Album On and Build Something at Midnight
You Have to Build with AI to Get Tron Ares

I’ve loved Tron since I was a kid. When I was about seven or eight years old (early 1980s!!!), my Mom took me to see Walt Disney’s Magic Kingdom on Ice at the Richfield Coliseum, which was this massive arena between Cleveland and Akron (sadly, torn down in 1999). The show had a Tron segment,

image mode Gave Me the Confidence to Go Fully Agentic

image mode Gave Me the Confidence to Go Fully Agentic
image mode Gave Me the Confidence to Go Fully Agentic - thumbnail showing broken packages vs container registry

I’ve been running Claude Code on my RHEL 10 workstation for a few months now, and I have to admit, with some embarrassment, I often run it with the ominous –dangerously-skip-permissions option. It reads and writes files, executes shell commands, installs packages, modifies system configs, all without asking permission first. I’ve been letting an AI

MCP-Airlock: An Open Source Defense Against Prompt Injection in AI Agents

MCP-Airlock: An Open Source Defense Against Prompt Injection in AI Agents
MCP-Airlock: An Open Source Defense Against Prompt Injection in AI Agents

Update (June 2026): MCP-Airlock has been renamed to Trentina. The project has grown from a web content sanitizer into a full MCP gateway with per-consumer profiles, tool allowlists, and parameter-level access controls. The new name reflects that expanded scope — and avoids a naming collision with another MCP gateway project. The architecture described in this